
$ rpki-client -vvf rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
File: 53B0CEC9D00981686264164126DB6F3385680024.mft (raw, json)
Hash identifier: Xd4vWnXVPsgF8jL5k7lXOUXjEHV4jIhgTw2OU30G70I=
Subject key identifier: ED:3B:5A:4F:E6:29:CB:2D:72:2B:D8:5F:01:74:EF:84:03:CB:C2:EC
Authority key identifier: 53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
Certificate issuer: /CN=53B0CEC9D00981686264164126DB6F3385680024
Certificate serial: 7E175A66601EB69801D22AC197B01CBAD3B78A2B
Authority info access: rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject info access: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
Manifest number: 85
Signing time: Fri 24 Jul 2026 15:21:33 +0000
Manifest this update: Fri 24 Jul 2026 15:16:33 +0000
Manifest next update: Sat 25 Jul 2026 18:30:33 +0000
Files and hashes: 1: 3231392e3233352e31362e302f32302d3230203d3e203538383334.roa (hash: r6KqIfOL8ifKdsPunCCm1mAP8gnrhN32td99CTh9X4I=)
2: 53B0CEC9D00981686264164126DB6F3385680024.crl (hash: h1oRYSiuXSBc5DX314TQ6g+dHyE8COUfH2iLPPo9mZw=)
3: 3231392e3233352e3230382e302f32302d3230203d3e203538383334.roa (hash: jkg6tUZ7+qXk3FouI03XOahA6TPu6n/Kjb5AdiASdbY=)
4: 3131392e34302e3132382e302f31372d3137203d3e203538383334.roa (hash: 1DmuiOPq4TEZCmPUH8eAmnwG9L8yZKBYkchb9eK5PEs=)
5: 34392e3233392e3139322e302f31382d3138203d3e203538383334.roa (hash: ec5yDLpeyWMgWUg4UNjd9N/J72lkvu3GkBAQZSij1hQ=)
6: 34392e3233392e3139322e302f31382d3138203d3e203137383136.roa (hash: ZzmzODzaCB8s1IKPJOR3kgAoZF7CG5/EOXrTUM6+kBo=)
7: 3131392e34322e302e302f31392d3139203d3e203538383334.roa (hash: UypYF6EVHxU0/wisde4zLRsNmq03Ct0ZuhmxCmXu5gs=)
Validation: OK
Signature path: rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.crl
rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/A56E872A403E7B9CEB9431A08F540401D2FBD710.mft
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/pW6HKkA-e5zrlDGgj1QEAdL71xA.cer
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires: Sat 25 Jul 2026 04:12:11 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
7e:17:5a:66:60:1e:b6:98:01:d2:2a:c1:97:b0:1c:ba:d3:b7:8a:2b
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=53B0CEC9D00981686264164126DB6F3385680024
Validity
Not Before: Jul 24 15:16:33 2026 GMT
Not After : Jul 25 18:30:33 2026 GMT
Subject: CN=ED3B5A4FE629CB2D722BD85F0174EF8403CBC2EC
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:a0:9a:19:36:f2:91:0f:2e:81:57:77:75:89:56:
d6:7e:54:c1:8b:47:b2:4c:65:25:b6:87:78:93:e3:
46:c4:38:ed:83:bb:c2:9e:7c:d5:33:90:f3:34:84:
c8:6d:f7:cf:2d:2b:d8:4d:8b:37:66:4c:8a:3a:66:
0b:dc:33:a2:8a:b2:3a:3a:4c:a2:d1:d6:ef:bb:11:
60:0e:07:09:c4:7a:b3:24:e1:21:ea:e2:07:45:75:
54:c4:0f:b9:4a:9c:ec:74:72:f2:80:ff:2e:d0:c7:
59:90:3e:3c:2b:2a:34:69:de:11:01:13:8e:7d:68:
73:38:90:88:c0:1b:81:bc:3c:76:e5:91:ed:ee:f2:
c9:06:3c:cb:e2:55:4f:5b:85:e8:0f:9b:7e:35:8d:
67:98:ea:af:f3:90:b5:2e:2e:cb:33:eb:d1:00:c7:
f6:40:da:11:7d:6c:07:51:4e:4c:1b:a3:cd:ee:fb:
b2:a9:3d:30:1b:e7:28:58:df:ce:41:e4:10:fb:2f:
15:4e:9c:2b:7e:29:88:cb:86:7c:d1:72:f7:3b:6b:
a3:d4:d0:d6:26:d3:1e:b8:ef:c5:4e:d4:26:72:46:
cf:81:07:c7:07:11:52:fb:7f:04:e1:4d:fb:06:82:
84:2d:f2:f3:d2:22:23:36:d5:8c:1f:f8:ec:16:ba:
92:9d
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
ED:3B:5A:4F:E6:29:CB:2D:72:2B:D8:5F:01:74:EF:84:03:CB:C2:EC
X509v3 Authority Key Identifier:
keyid:53:B0:CE:C9:D0:09:81:68:62:64:16:41:26:DB:6F:33:85:68:00:24
X509v3 Key Usage: critical
Digital Signature
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.crl
Authority Information Access:
CA Issuers - URI:rsync://rpki-rps.cnnic.cn/repo/A1055390775090675715/1/53B0CEC9D00981686264164126DB6F3385680024.cer
Subject Information Access:
Signed Object - URI:rsync://rpki-rps.cnnic.cn/repo/A1097060105137946625/0/53B0CEC9D00981686264164126DB6F3385680024.mft
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
73:cf:32:70:7f:ae:95:7b:a7:65:15:ea:68:67:ed:71:4c:17:
fb:42:91:41:c7:b3:3c:5e:1a:9a:59:57:39:aa:6b:23:90:5d:
32:78:4b:b5:cd:0a:54:56:32:35:74:9d:04:40:b3:46:dc:e3:
d7:eb:20:a4:14:f0:99:3e:f9:0d:ae:af:93:f2:37:22:fe:1a:
2d:8b:a1:0d:b2:c2:e7:a9:a1:99:20:91:8e:23:d2:ec:54:09:
37:90:c9:8e:48:45:39:7a:40:d0:1c:f0:c8:18:dd:1b:7d:81:
af:60:a6:ec:7b:e0:36:9a:53:4b:9f:f9:a3:df:64:90:8e:ca:
c1:3a:73:a1:b9:4f:38:19:3c:06:c4:66:ab:06:41:f1:02:2b:
6d:eb:2c:28:aa:77:34:b9:63:12:1f:b5:71:b3:f5:9c:7c:b0:
dd:f1:2b:03:f8:81:fa:96:ff:46:b1:97:71:1b:d1:a2:ab:9f:
1a:9d:2a:b3:2f:1a:3c:02:e9:3f:7a:d4:a5:70:4a:f3:01:0d:
8a:38:f9:39:12:b6:49:8e:eb:8b:86:1c:14:e4:2c:21:27:76:
73:24:d4:58:be:27:59:c3:ce:71:7e:77:d8:93:f4:76:f6:a0:
5d:42:26:f3:4c:f1:5e:7c:86:45:51:45:fc:65:3b:bd:36:1d:
fc:d6:d0:62
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Jul 24 17:01:17 2026 by rpki-client